From 98be190dd56ff7fa422311f910e700069568db4c Mon Sep 17 00:00:00 2001
From: Starla Insigna <hatkirby@fourisland.com>
Date: Sat, 21 Feb 2009 10:26:52 -0500
Subject: Added comment editing and deleting

---
 pages/delete-comment.php | 54 ++++++++++++++++++++++++++++++++++++++++++++++++
 pages/edit-comment.php   | 54 ++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 108 insertions(+)
 create mode 100644 pages/delete-comment.php
 create mode 100644 pages/edit-comment.php

(limited to 'pages')

diff --git a/pages/delete-comment.php b/pages/delete-comment.php
new file mode 100644
index 0000000..f8d1936
--- /dev/null
+++ b/pages/delete-comment.php
@@ -0,0 +1,54 @@
+<?php
+/*
+       444444444  
+      4::::::::4  
+     4:::::::::4  
+    4::::44::::4  
+   4::::4 4::::4   Four Island
+  4::::4  4::::4  
+ 4::::4   4::::4   Written and maintained by Starla Insigna
+4::::444444::::444
+4::::::::::::::::4  pages/delete-comment.php
+4444444444:::::444
+          4::::4   Please do not use, reproduce or steal the
+          4::::4   contents of this file without explicit
+          4::::4   permission from Hatkirby.
+        44::::::44
+        4::::::::4
+        4444444444
+*/
+
+if (!defined('S_INCLUDE_FILE')) {define('S_INCLUDE_FILE',1);}
+
+require('headerproc.php');
+
+if (!isset($_GET['id']))
+{
+	generateError('404');
+} else {
+	if (isLoggedIn())
+	{
+		$getcomment = "SELECT * FROM comments WHERE id = " . $_GET['id'];
+		$getcomment2 = mysql_query($getcomment);
+		$getcomment3 = mysql_fetch_array($getcomment2);
+
+		if ($getcomment3['id'] == $_GET['id'])
+		{
+			if ((isAdmin()) || (($getcomment3['is_anon'] == 0) && (getSessionUserID() === $getcomment3['user_id'])))
+			{
+				$delcomment = "DELETE FROM comments WHERE id = " . $_GET['id'];
+				$delcomment2 = mysql_query($delcomment);
+
+				header('Location: ' . getCommentUrl($getcomment3));
+			} else {
+				generateError('404');
+			}
+		} else {
+			generateError('404');
+		}
+	} else {
+		generateError('404');
+	}
+}
+
+?>
diff --git a/pages/edit-comment.php b/pages/edit-comment.php
new file mode 100644
index 0000000..92a1aba
--- /dev/null
+++ b/pages/edit-comment.php
@@ -0,0 +1,54 @@
+<?php
+/*
+       444444444  
+      4::::::::4  
+     4:::::::::4  
+    4::::44::::4  
+   4::::4 4::::4   Four Island
+  4::::4  4::::4  
+ 4::::4   4::::4   Written and maintained by Starla Insigna
+4::::444444::::444
+4::::::::::::::::4  pages/edit-comment.php
+4444444444:::::444
+          4::::4   Please do not use, reproduce or steal the
+          4::::4   contents of this file without explicit
+          4::::4   permission from Hatkirby.
+        44::::::44
+        4::::::::4
+        4444444444
+*/
+
+if (!defined('S_INCLUDE_FILE')) {define('S_INCLUDE_FILE',1);}
+
+require('headerproc.php');
+
+if (!isset($_GET['id']) || !isset($_POST['comment']))
+{
+	generateError('404');
+} else {
+	if (isLoggedIn())
+	{
+		$getcomment = "SELECT * FROM comments WHERE id = " . $_GET['id'];
+		$getcomment2 = mysql_query($getcomment);
+		$getcomment3 = mysql_fetch_array($getcomment2);
+
+		if ($getcomment3['id'] == $_GET['id'])
+		{
+			if ((isAdmin()) || (($getcomment3['is_anon'] == 0) && (getSessionUserID() === $getcomment3['user_id'])))
+			{
+				$setcomment = "UPDATE comments SET comment = \"" . mysql_real_escape_string($_POST['comment']) . "\" WHERE id = " . $_GET['id'];
+				$setcomment2 = mysql_query($setcomment);
+
+				header('Location: ' . getCommentUrl($getcomment3) . '#comment-' . $getcomment3['id']);
+			} else {
+				generateError('404');
+			}
+		} else {
+			generateError('404');
+		}
+	} else {
+		generateError('404');
+	}
+}
+
+?>
-- 
cgit 1.4.1